Sponsored by..

Wednesday, 16 December 2015

This fake financial spam is not from John S. Shackleton (Sheffield) Ltd but is instead a simple forgery with a malicious attachment. It is the second spam in a day pretending to be from a steel company.

Our Terms and Conditions of Sale apply to all quotations and the supply of all goods.Copies of our Terms and Conditions of Sale are available on request or can be foundon our website www.johnsshackleton.co.uk . TheseTerms and Conditions include a provision (see term 12) that title to goods suppliedshall not pass to a customer until payment is received by us in full for all goodssupplied. We only accept orders for the supply of goods on the basis our Terms andConditions of Sale apply.

I have only seen a single sample of this spam, with an attachment
s547369.DOC which has a VirusTotal detection rate of 4/55. According to this Malwr Report it downloads a malicious binary from: